openclaw vulnerabilities (npm)
593 vulnerabilities.
openclawnpmOpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider6.9 MediumopenclawnpmOpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation8.6 HighopenclawnpmOpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters7.1 HighopenclawnpmOpenClaw < 2026.3.28 - Brute Force Attack via Missing Rate Limiting on Webhook Shared Secret Authentication6.3 MediumopenclawnpmOpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval9.4 CriticalopenclawnpmOpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions5.3 MediumopenclawnpmOpenClaw < 2026.3.28 - Insufficient Scope Validation in node.pair.approve8.6 HighopenclawnpmOpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo Channel6.9 MediumopenclawnpmOpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands5.3 MediumopenclawnpmOpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request7.2 HighopenclawnpmOpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement6.5 MediumopenclawnpmOpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistence7.1 HighopenclawnpmOpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation8.4 HighopenclawnpmOpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpoint5.3 MediumopenclawnpmOpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing6.9 MediumopenclawnpmOpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters7.1 HighopenclawnpmOpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts6.9 MediumopenclawnpmOpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt5.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypass6.9 MediumopenclawnpmOpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation6.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke6.9 MediumopenclawnpmOpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession6.1 MediumopenclawnpmOpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks6.9 MediumopenclawnpmOpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing6.9 MediumopenclawnpmOpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensions5.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName2.3 LowopenclawnpmOpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution7.1 HighopenclawnpmOpenClaw < 2026.3.25 - Authorization Bypass in HTTP Session History Route7.1 HighopenclawnpmOpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting6.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypass5.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices6.9 MediumopenclawnpmOpenClaw < 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limiting6.3 MediumopenclawnpmOpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope8.7 HighopenclawnpmOpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect8.5 HighopenclawnpmOpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim8.7 HighopenclawnpmOpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint7.2 HighopenclawnpmOpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update6.9 MediumopenclawnpmOpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool6.0 MediumopenclawnpmOpenClaw < 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolution6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat6.3 MediumopenclawnpmOpenClaw < 2026.3.22 - Missing controlScope Enforcement in Send Action5.3 MediumopenclawnpmOpenClaw < 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiter6.3 MediumopenclawnpmOpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation8.7 HighopenclawnpmOpenClaw < 2026.3.22 - Improper Authentication Verification in Google Chat Webhook6.0 MediumopenclawnpmOpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk2.3 LowopenclawnpmOpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlist6.3 MediumopenclawnpmOpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands7.1 HighopenclawnpmOpenClaw < 2026.3.22 - Unauthorized Action Execution via Callback Dispatch6.9 MediumopenclawnpmOpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots7.1 High- Show moreLoading…